Degoogle: Cutting Google out of your life

Re:Degoogle: Cutting Google out of your life by genghizkhan on Sunday August 23, 2020 @06:17AM (#24250883)

LineageOS tends to disable a lot of security baked into android, so itmight not be a good recommendation. According to Daniel Micay: "It significantly weakens the SELinux policies, rolls back mitigations for device porting / compatibility, disables verified boot, lacks proper update security including rollback protection, adds substantial attack surface like FFmpeg alongside libstagefright, etc. They merge in huge amounts of questionable, alpha quality code from the Code Aurora Forum repositories too. Many devices (including Nexus and Pixel phones) also don't get their full firmware updates shipped by LineageOS. It's unrealistically expected that users will flash the firmware and vendor partitions on their own each month and of course that's another incompatibility with verified boot and a locked bootloader." [0]

[0]: https://www.reddit.com/r/CopperheadOS/comments/917yab/can_an...

[ Parent | on HN ]

Re:Degoogle: Cutting Google out of your life by stiray on Sunday August 23, 2020 @08:07AM (#24251313)

Security is always weighting between danger and benefits. It means something different for everyone of us, i consider my phone with microg, netguard and xprivacylua and without google or any 3d party application beeing able to connect to the internet unless faking the data as secure (or, if you want - private), while I am not only flashing but also building my roms until I get full linux support for my second phone when I will depart from android world.

For now, lineage is as good as it gets, sure, I would love to have patched OS, withoug google etc., but for now there is really not much of alternatives available for various models of phones, and quite frankly - probably more than half of android phones are vulnerable, unpatched etc. let me just mention latest DSP vulnerabilities. At least attack surface isnt that big :D

Its on the eyes of beholder.

--- update ---

Looks like I am moving away from android today.

https://support.planetcom.co.uk/index.php/Cosmo_Linux_Mobile...

[ Parent | on HN ]

Re:Degoogle: Cutting Google out of your life by corty on Sunday August 23, 2020 @09:05AM (#24251621)

Half of those "security" features are at best useless and at worst more DRM features anyways. And yes, the firmware update mechanisms in android are abysmal in general, but that this is slightly better in google phones doesn't mean that it is good anywhere. For the most part, lineageOS is on par with any random android vendor there. No better and no worse. For software updates, it is generally far better.

[ Parent | on HN ]